From 46e099c74f7a642c76c55e93e04fce124ae11865 Mon Sep 17 00:00:00 2001
From: Ivlev Denis <di-erz@yandex.ru>
Date: Wed, 7 Mar 2018 15:46:17 +0300
Subject: [PATCH] Block the purchase of the course where the author is the user
 himself

---
 apps/course/templates/course/course.html | 4 ++--
 apps/payment/views.py                    | 6 ++++++
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/apps/course/templates/course/course.html b/apps/course/templates/course/course.html
index 0d789b81..848b31b7 100644
--- a/apps/course/templates/course/course.html
+++ b/apps/course/templates/course/course.html
@@ -25,7 +25,7 @@
         </div>
         <div class="go__title">Вернуться</div>
       </a>
-      {% if not paid and course.price %}
+      {% if course.author != request.user not paid and course.price %}
       <a
         class="go__btn btn{% if pending %} btn_gray{% endif %} btn_md"
         {% if user.is_authenticated %}
@@ -392,7 +392,7 @@
         </div>
         {% endif %}
       </div>
-      {% if not paid and course.price %}
+      {% if course.author != request.user not paid and course.price %}
       <a
         class="go__btn btn{% if pending %} btn_gray{% endif %} btn_md"
         {% if user.is_authenticated %}
diff --git a/apps/payment/views.py b/apps/payment/views.py
index f22aefc7..52ccd274 100644
--- a/apps/payment/views.py
+++ b/apps/payment/views.py
@@ -4,6 +4,7 @@ import json
 from datetime import timedelta
 
 from django.contrib import messages
+from django.contrib.auth.decorators import login_required
 from django.http import HttpResponse
 from django.shortcuts import redirect
 from django.views.generic import View, TemplateView
@@ -22,12 +23,16 @@ from .models import AuthorBalance, CoursePayment, SchoolPayment
 logger = logging.getLogger('django')
 
 
+@method_decorator(login_required, name='dispatch')
 class CourseBuyView(TemplateView):
     template_name = 'payment/paymentwall_widget.html'
 
     def get(self, request, pk=None, *args, **kwargs):
         host = request.scheme + '://' + request.get_host()
         course = Course.objects.get(id=pk)
+        if request.user == course.author:
+            messages.error('Вы не можете приобрести свой курс.')
+            return redirect(reverse_lazy('course', args=[course.id]))
         course_payment = CoursePayment.objects.create(
             user=request.user,
             course=course,
@@ -54,6 +59,7 @@ class CourseBuyView(TemplateView):
         return self.render_to_response(context={'widget': widget.get_html_code()})
 
 
+@method_decorator(login_required, name='dispatch')
 class SchoolBuyView(TemplateView):
     template_name = 'payment/paymentwall_widget.html'